Re: Get a user's all groups

On Tue, Dec 26, 2023 at 07:17:51PM +0100, Daniel Sahlberg wrote:
> Hi,
> 
> apr_uid_current() can retur the user id and primary group id of a user. Is
> there a way to find out if a user also has secondary groups (something
> similar to getgrouplist(3)?
> 
> The Subversion project has some bug reports where a user has R/W access to
> a certain file via a secondary group, but APR doesn't pick up the secondary
> groups and thus we don't think the user has R/W access. I'd like to improve
> this by also considering all secondary groups.

How are you testing for readability/writability here exactly? On Unix 
the right way is using access() but there isn't an APR wrapper for it. 
(Trying to manually check against user/groups is not a reliable way to 
test, not just because of groups but also because of things like setuid 
processes and RBAC systems which may exist on top of the user/groups.)

Regards, Joe